Alternatives and similar repositories for ETW-Trace

Users that are interested in ETW-Trace are comparing it to the libraries listed below

• russellklenk / ETW
  Event Tracing for Windows Custom Events
  ☆21Updated 10 years ago
• P-i-N / sbp
  Structured Bindings Pack - serialize C++ structs into MessagePack binary form
  ☆21Updated 4 years ago
• AndrewGaspar / km-stl
  A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…
  ☆31Updated 8 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 8 years ago
• zodiacon / ndcoslo2019
  NDC Oslo 2019 slides and demos
  ☆32Updated 4 years ago
• JustasMasiulis / process_handle
  A cross platform, leak free system handle wrapper
  ☆19Updated 7 years ago
• Speedi13 / NsiAllocateAndGetTable-used-from-GetTcpTableInternal
  Undocumented NsiAllocateAndGetTable usage in GetTcpTableInternal reverse engineered on Win7 X64
  ☆20Updated 7 years ago
• KernelPanic-OpenSource / Win2K3_NT_sdktools
  Windows Server 2K3 NT 5
  ☆12Updated 4 years ago
• RIscRIpt / ntl
  Very tiny and selective implementation of STL for Windows NT kernel mode drivers
  ☆18Updated 4 years ago
• avakar / corecursive
  Single-header C++20 library to remove recursion using coroutines
  ☆12Updated 5 years ago
• HoShiMin / AriadnaProject
  🧶 The Win32 usermode threading library with UMS/fibers/threads support
  ☆32Updated 5 years ago
• japajoe / StackVMCPP
  A stack and register based virtual machine which can compile and execute arbitrary code in runtime
  ☆44Updated 3 months ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• JustasMasiulis / vmutils
  cross platform library to manipulate and extract information of memory regions
  ☆34Updated 7 years ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 2 years ago
• xuyun018 / LPC-Local-Procedure-Call-
  LPC (Local Procedure Call) is a portion of Windows NT kernel, used for fast communication between threads or processes. It can be also us…
  ☆15Updated 4 years ago
• vlmillet / Phantom.JIT
  Phantom.Code extension providing Just-In-Time asm x64 compilation based on LLVM
  ☆8Updated 2 years ago
• jherico / HidInterceptor
  A simple DLL that can intercept HID messages and pass them on to the real HID DLL, while logging the data.
  ☆21Updated 10 years ago
• bb107 / ServiceCall
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Updated 5 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆25Updated 11 years ago
• shanepowell / DbgHelpUtils
  Windows user mini-dump helper library to extract data from it.
  ☆11Updated last month
• addrianyy / asmlib_x64
  x64 assembler library
  ☆31Updated last year
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• OSRDrivers / penter
  penter hook example and driver time recorder
  ☆31Updated 7 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆28Updated 4 years ago
• Vicshann / Common
  Some eternal WIP stuff :)
  ☆17Updated 3 months ago
• mrfearless / x64dbg-plugin-template-for-Visual-Studio
  x64dbg plugin template for visual studio
  ☆20Updated 6 years ago
• JustasMasiulis / args
  Header only library for binding, reordering and currying of function arguments without cost
  ☆18Updated 7 years ago
• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆38Updated 6 years ago
• arcpop / Observer
  ☆17Updated 8 years ago